3 ms·
> sure hope that companies you work with or for never ever have a bug We aren't talking about a bug, we're talking about wilful negligence here (funnily, your
by sofixa 2y ago
> sure hope that companies you work with or for never ever have a bug
We aren't talking about a bug, we're talking about wilful negligence here (funnily, your example about Microsoft is on point - Azure exhibits the same type wilful negligence with their absurd lack of security). It's not a "shit happens" type of situation - of course bugs happen. Security bugs happen too. Sometimes even very stupid ones!
Again, we're talking about a company with highly privileged access (to the kernel) and associated potential for security exploits and crashes not doing any testing on updates. And not only releasing a broken update that results in crashes once, but fucking twice. Why didn't the they learn from it the first time? It was inexcusable once, it's even more inexcusable that it happened twice.
And yes, if you buy from random vendors without doing your due diligence on how their failure might impact you, and what they're doing to make sure it doesn't happen, you're taking massive risks. If you get burned by it and still can't be bothered to think about this, I don't know what to tell you. At least that checkbox is ticked and we have EDR so we secure, am I right? That's all that matters for a lot of cybersecurity people, hope you're not one of them.